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1 Executive Summary 





1.1 The Hong Kong Monetary Authority (“HKMA”) places a high value on 
maintaining the integrity of the Hong Kong banking sector through 
strong and effective anti-money laundering and counter-terrorist 
financing policies, procedures and controls (“AML/CFT systems”). 
Effective AML/CFT systems will assist authorized institutions (“Als”) to 
prevent their services from being abused for illicit purposes, including 
money laundering and terrorist financing (“ML/TF”) and detect it when 
it does in fact occur. 


1.2 The HKMA conducted thematic on-site examinations on nine Als in 
2012 and 2013 to assess their AML/CFT systems over transaction 
screening, transaction monitoring and suspicious transaction 
reporting. 


1.3 Based on the sound industry practices and certain control weaknesses 
identified during these examinations, the HKMA has developed this 
paper’ to set out additional guidance regarding transaction screening, 
transaction monitoring and suspicious transaction reporting. In brief, 
Als should demonstrate that they have taken all reasonable measures 
to mitigate ML/TF risks, including: 


(a) transaction monitoring systems, using a level of automation that 
is appropriate to the scale of the Al’s operations, should be 
validated as effective in identifying unusual or suspicious activity; 


(b) appropriate emphasis should be placed on the management of 
transaction monitoring alerts, the decision making process for 
suspicious transaction reports (“STRs”) and the completion and 
timely submission of those reports to the Joint Financial 
Intelligence Unit (“JFIU”); and 


(c) post-reporting actions should adequately mitigate further ML/TF 
risks to the Al. 





This guidance paper supersedes the “Guidance Paper — Good Practices on Transaction Monitoring” issued 
by the HKMA on 4 July 2008. 
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1.4 This guidance paper will assist Als in not only meeting the legal and 
regulatory obligations under the Anti-Money Laundering and 
Counter-Terrorist Financing (Financial Institutions) Ordinance (“AMLO”) 
and the STR reporting ordinances’, but also implementing effective 
measures to further mitigate their ML/TF risks. Although this paper 
does not form part of the Guideline on Anti-Money Laundering and 
Counter-Terrorist Financing (for Authorized Institutions) (“AMLO 
Guideline”), the HKMA expects every Al to give full consideration to 
the adoption of the practices this paper describes, where necessary, to 
improve their AML/CFT systems, taking into consideration their ML/TF 
risks. 


1.5 The contents of this guidance paper are neither intended to, nor 
should be construed as, an exhaustive list of the means of meeting Als’ 
statutory and regulatory requirements, and should be read in 
conjunction with the existing and applicable laws, guidelines and 
guidance papers. 





? The Drug Trafficking (Recovery of Proceeds) Ordinance, Cap. 405, the Organized and Serious Crime 


Ordinance, Cap. 455, and the United Nations (Anti-Terrorism Measures) Ordinance, Cap. 575 
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2 Transaction Screening — Designated Parties 
and Sanctions 





Matching Algorithms and Screening of Non-Latin Script Names and Codes 


2.1 Als should be conversant with the abilities of the algorithm used in its 
transaction screening system, with particular attention being paid to 
the ability of the name screening system to identify names with minor 
alterations such as reverse order, partial name and abbreviated forms. 


2.2 Effective screening procedures? should be in place for names that use 
non-Latin script (including Chinese characters) or commercial codes. 
Such procedures should be reviewed periodically. 


Designated Parties Database and Sanctioned Jurisdictions List* 


2.3 Als should ensure that the designated parties database and sanctioned 
jurisdictions list maintained are updated in a timely manner in 
accordance with paragraph 6.20 of the AMLO Guideline. Relevant 
departments (e.g. compliance or information technology department) 
should be assigned to update and review (or oversee the update and 
review of) the designated parties database and sanctioned jurisdictions 
list regularly. These practices should exist in policies and procedures. 
Failure to maintain complete lists for this purpose will result in 
transactions involving these jurisdictions not being subject to increased 
scrutiny and enhanced due diligence. 


2.4 Als’ internal sanctions policies and procedures should not only 
implement sanctions as regards designated persons and entities but 
also may apply to specific types of activities (e.g. supplies of arms). 





Automated, or other effective manual processes 

Transactions connected to jurisdictions subject to sanction regulations imposed by the Hong Kong 
Government under the United Nations Sanctions Ordinance, Cap. 537, should be subject to appropriate 
measures to ensure no violation of the relevant sanction requirements. 
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2.5 In line with paragraph 6.5 of the AMLO Guideline, Als should be aware 
of the scope and focus of relevant financial/trade sanctions regimes in 
other jurisdictions that might affect their operations and vigilantly 
assess the possible impact, ensuring that procedures and processes are 
in place to mitigate the risks where appropriate. 


2.6 Where an Al subscribes to a commercial risk register (where designated 
entities and jurisdictions that have been added by the relevant 
authorities, e.g. United Nations Security Council and Office of Foreign 
Assets Control, would be added automatically to the Als’ database), Als 
should periodically conduct sample testing on the names of newly 
added designated entities and jurisdictions to ensure the completeness 
and accuracy of the database. 


2.7 Irrespective of the action taken by head office or other group entities 
to update the designated parties database, Als have ultimate 
responsibility with respect to the accuracy and completeness of the 
database and should ensure that systems are in place to support local 
activities to reflect this principle. 


Handling Transactions with Potential Name Matches or Involving Sanctioned 
Jurisdictions 


2.8 Als should have policies and procedures to ensure appropriate handling 
and management of (i) transaction screening alerts and (ii) transactions 
connected with sanctioned jurisdictions. 


2.9 Relevant staff should review the alerts and/or transactions involving 
sanctioned jurisdictions to check whether any suspicious or prohibited 
activities are involved and to determine whether possible matches are 
genuine hits (for example, staff may obtain additional information from 
the customers or respondent banks, ascertain the purpose of the 
transaction or conduct an appropriate assessment). 


2.10 Where transactions are confirmed to involve sanctioned jurisdictions, 
there should be a clear escalation procedure to guide handling staff to 
obtain approval from a person with relevant authority prior to 
processing or rejecting the transactions. If an STR is made, the 
post-reporting guidance in paragraph 7.33 of the AMLO Guideline 
should be followed. 
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2.11 A written record of the rationale for the release of an alert concerning 
a potential name match or transaction involving a sanctioned 
jurisdiction should be maintained to demonstrate that relevant staff 
had checked whether the particulars on the payment messages actually 
indicated the involvement of designated parties or sanctioned 
activities. 
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3 Transaction Monitoring 





3.1 The purpose of transaction monitoring is to alert the Al to activities which 
appear to be unusual or suspicious for further examination and 
investigation”. For a transaction monitoring system to be effective, the 
scope and complexity of the monitoring process should be determined on 
a risk-sensitive basis. In practical terms, this means that an Al will need 
to undertake different levels of monitoring within its different business 
units depending on various factors. Failure to conduct effective ongoing 
monitoring of its business relationships on a risk-sensitive basis will 
expose an Al to unacceptable ML/TF risk. 


3.2 Knowing and understanding your customers and updating their risk 
profiles on a risk sensitive basis are also important elements of an 
effective transaction monitoring system. The better the Al knows its 
customers, the greater will be its ability to identify discrepancies between 
a given transaction and the customer’s risk profile. This in turn will 
provide the Al with critical information to assess whether unusual or 
suspicious activities exist. In addition, a good understanding of the Als’ 
customers is a prerequisite for applying differentiated monitoring for 
customers with different levels of ML/FT risks. 


3.3 Als should be able to demonstrate that its transaction monitoring system 
is properly established, adequately resourced and effectively applied, 
taking into account the factors set out in paragraph 5.9 of the AMLO 
Guideline. 


3.4 To the extent reasonably practicable and using a risk-based approach, Als 
should ensure that transaction monitoring takes place in respect of the 
overall relationship/customer, rather than on an individual account basis. 


3.5 Where purely manual processes are employed, the Al should be able to 
demonstrate the credibility and effectiveness of the system through 
adequate policies and procedures that provide guidance to staff. 
Adequate records should also be kept to demonstrate the actions taken in 
accordance with those procedures. 





In the context of post-transaction reviews, there may also be occasions when Als may wish to implement, 
on a risk sensitive basis, and taking into consideration other relevant factors such as their business activities 
and group policies, appropriate controls to review transactions involving certain high-risk jurisdictions that 
are not sanctioned under Hong Kong law, but which are of particular concern to the Al. 


Guidance Paper on Transaction Monitoring, Transaction Screening 
and Suspicious Transaction Reporting Revised May 2018 


HONG KONG MONETARY AUTHORITY 
Transaction Monitoring Systems — Development, Implementation and Review 


3.6 Als should take into account the size, nature and complexity of its 
business (reference may also be made to paragraph 5.9 of the AMLO 
Guideline) in an appropriate assessment, prior to the launch of the 
transaction monitoring system. To ensure adequate coverage of its 
business operations, the assessment should take into consideration the 
question of whether to implement, and if so the appropriate degree of, 
automation® that is required for the transaction monitoring system. 
This assessment should be in writing as a record of the rationale for 
adopting the system, including how it meets the Al’s needs and other 
material factors such as the appropriateness of the system vendor, the 
effectiveness of the interface between the new system and the Al’s 
existing infrastructure, how updates will be undertaken and any resource 
implications. 


3.7 Senior management should monitor the development and 
implementation of the transaction monitoring system. 


3.8 The objectives and key performance indicators of the system should be 
defined to enable the Al to recognise when a system is underperforming. 


3.9 Als should: 


(a) ensure relevant staff are aware of the operation of the transaction 
monitoring system, the rationale for the characteristics it monitors 
and scenarios that are employed, bearing in mind the guidance in 
paragraph 5.3 of the AMLO Guideline; 


(b) be sufficiently aware of the limitations of automated systems; 


(c) recognise that the responsibility to mitigate ML/TF risk lies with the 
Al, not with the system or its vendor; 


(d) ensure that AML/CFT systems reflect the principle that automated 
systems do not replace other more ‘human’ efforts to identify 
unusual or suspicious activity; rather the system ‘complements’ 
those efforts; and 





ê The HKMA does not mandate the use of automated systems, but dependant on the size of the Al and the 


complexity of its operations etc., effective monitoring may necessitate the automation of certain part of 
the monitoring process. 
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(e) understand how the data, or artificial intelligence, that is entered 
into the automated system correlates to the Als’ requirements and 
the ML/TF risks to which it is subject. 


3.10 Performance issues should be promptly rectified, liaison between relevant 
business units and stakeholders should be effective and quality of 
monitoring should remain high throughout the process (e.g. this could be 
reflected in meeting minutes and terms of reference or relevant approval 
documentation). 


3.11 Als should ensure, through the establishment of policies and procedures, 
the requirement to periodically review the transaction monitoring system. 
This should include an assessment of the transaction characteristics it 
monitors, risk factors, parameters and thresholds used (whether or not 
these generate alerts) to ensure they remain optimal for the Al and 
address ML/TF risk, taking into account changes in business operations 
and developments in ML/TF methods. 


3.12 Als should ensure the parameters/thresholds in use are appropriate and 
justified for the nature and activities of its customers and assist to identify 
suspicion (such as when account activity is incommensurate with the 
customer’s profile or income, where other examples of suspicion are 
provided at paragraphs 7.14 and 7.39 to 7.44 of the AMLO Guideline). 


3.13 Customer classifications and groupings for the purpose of alert generation 
should be appropriate to guard against inappropriate thresholds being 
applied and alert generation being adversely impacted. 


Alert Handling (see also paragraphs 2.8 to 2.11) 


3.14 Als should ensure the level of review/investigation undertaken by relevant 
staff members is satisfactory, taking into account relevant information 
obtained about the customer’, conducting internet searches, obtaining 
supporting documents (e.g. invoice) of transactions to determine whether 


The information that might be relevant will depend on the Als’ risk assessment. For example, information 
such as occupation and business nature will assist in the determination of ML/TF risk, and corresponding 
thresholds being set for transaction monitoring purposes. In the case of corporate accounts, unless Als 
understand the purpose and nature of the business undertaken and are alert to the risk that insufficient or 
inaccurate information presents, they may be unable to assess the ML/TF risk or implement appropriate 
controls. Corporate accounts can sometimes be misused to receive the proceeds of overseas frauds (e.g. 
recently incorporated, relative inactivity in the account followed by multiple inward and outward 
remittances from and to parties that are seemingly unconnected with the business profile of the customer). 
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the transactions were suspicious. Als should provide guidance on 
handling alerts and assessing transactions in policies and procedures. 


3.15 Als may consider using a standardised form to collect customer and 
transaction information from relevant staff for alert/management 
information system (“MIS”) report clearance purposes, where appropriate, 
to assist in enhancing the consistency and sufficiency of information 
gathered in the alert clearance process. Information which may be 
collected in this way could include, for example, a brief background of the 
customer, transaction details, source of funds, purpose and nature of 
transaction, etc. 


3.16 Als should monitor the time taken to review alerts closely, ensuring that 
they are conducted swiftly, and enable the Al to report STRs as soon as it 
is reasonable to do so. 


3.17 Follow up actions should be tracked and records maintained of actions 
undertaken for audit purposes. The processes employed should be 
codified in policies and procedures, and subject to periodic review and 
senior management sign-off to ensure they are up-to-date. Sufficient 
documentation should be maintained to evidence the analysis and 
determination of whether the transaction activities or patterns 
highlighted in alerts/MIS reports were suspicious or not (for avoidance of 
doubt, merely appending a signature to an approval document is 
generally insufficient). 


3.18 Als should be cautious as to the use of pre-defined answers for the 
clearance of alerts. Generally, evidence of alert-by-alert considerations 
that are tailored to the specific circumstances of each customer and/or 
alert concerned, are required. 


3.19 Als should have information available as to the number of alerts currently 
being reviewed and their status. 


MIS Reports 


3.20 Where adopted by an Al, the scope and range of MIS reports should be 
sufficient to address all areas of ML/TF risk to which the Al is exposed. 
The requirement to perform regular reviews on the scope and range of 
MIS reports should be established in policies and procedures. 


8 7 
Als should ensure, for example, that adequate resources are allocated for the resolution of alerts. 
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Additional Observations Relating to Ongoing Due Diligence 


3.21 Als should ensure, through adequate policies, procedures and training 
that staff obtain, at the time of the transaction, sufficient information to 
understand the source of frequent and substantial cash deposits or 
withdrawals, thereby ensuring that such activity is commensurate with 
the background of the customer. For example, relevant staff may be 
required to (i) obtain the source of funds and understand the purpose of 
the transaction where a cash transaction exceeds certain amounts; (ii) 
obtain additional information such as invoice on a risk sensitive basis; and 
(iii) make further enquiries with the customer if the cash transaction 
appeared to be incommensurate with the customer’s profile. 


3.22 As set out in paragraph 5.11 of the AMLO Guideline, examining possible 
grounds for suspicion may include asking the customer questions. Als 
should ensure, through training and oversight that staff (both front-line 
and checking staff) do not accept at face value a simplistic but insufficient 
explanation provided by a customer for suspicious activity. More 
detailed analysis should be conducted to ensure risk has been addressed, 
or where it is not, a report made and the matter escalated. In all cases, 
the steps taken should be balanced against the risk of tipping-off. 


3.23 The results from transaction monitoring generally (irrespective of whether 
or not a report is filed) should be fed back into the customer risk profile 
and training. For example, if a significant proportion of the Als’ STRs 
relate to recently incorporated companies opened through the use of 
intermediaries, the Al should ensure measures are taken to address the 
ML/TF risk, reviewing the onboarding process and training etc. 
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4 Suspicious Transaction Reports 





Timing and Manner of Reports 


4.1 The internal analysis and investigation of suspicious transactions should 
be conducted as swiftly as is reasonably practicable. Als should avoid 
the use of excessively long reporting lines, containing several 
management layers, or the unnecessary involvement of business units. 
Reference should also be made to paragraphs 7.23 and 7.24 of the AMLO 
Guideline, which provide practical guidance on swift escalation and 
reporting. 


4.2 Als should provide clear timeframes within which an internal report, as a 
general rule, should be completed or escalated. 


4.3 Internal reporting processes should be codified in policies and procedures 
including clear handling procedures for STRs (providing examples of 
particular scenarios, where appropriate), principles applicable to 
investigation, actions in respect of connected accounts or relationships, 
making a disclosure to the JFIU and following up investigation results. 


4.4 Als should ensure that STRs: 
(a) are submitted to the JFIU as soon as it is reasonable to do so; and 


(b) are of high quality, containing sufficient relevant information that 
will facilitate appropriate analysis by the JFIU (for further guidance 
please see Annex “Quality and Consistency in Suspicious Transaction 
Reports” and paragraph 7.18 of the AMLO Guideline); 


4.5 In order to ensure correct evaluation and investigation, Als should ensure 
that the Money Laundering Reporting Officer (“MLRO”) and other 
relevant staff members have been provided with guidance, such as 
written procedures, that cover the types of information that should be 
included in an STR in different situations and for different types of 
entities. 


4.6 Als should maintain adequate records of the evaluation process or the 
rationale for non-submission of a report to the JFIU (reference may also 
be made to paragraph 7.31 of the AMLO Guideline). 
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Post-Reporting Matters 


4.7 Under paragraph 7.33 of the AMLO Guideline, the HKMA has clearly 
articulated the types of actions that should be undertaken once an STR 
has been made, based on the long established principle that filing an STR 
is only part of the process for an Al and in no way absolves an Al from the 
legal, reputational or regulatory risks associated with the account’s 
continued operation. 


4.8 Als should ensure that its policies and procedures regarding post- 
reporting matters include adequate guidance concerning: 


(a) the actions that are to be undertaken” upon filing of an STR 
(irrespective of the feedback received from the JFIU), including at a 
minimum, an appropriate review of the relationship and the risk 
rating (other steps that may be taken, depending on the facts and 
circumstances involved, include upgrading the risk rating of the 
customer, imposing account controls and/or conducting enhanced 
monitoring while a review is being conducted, or discontinuing the 
relationship, where appropriate); 


(b) escalation to the MLRO, and if necessary, the Al’s senior 
management to determine how to handle the relationship to 
mitigate the potential legal and reputational risks (reference may 
also be made to paragraph 7.33(e) of the AMLO Guideline); and 


(c) the treatment and oversight of repeat internal/external reports of 
suspicion (for example, the need for (i) clear guidelines and 
escalation procedures; (ii) appropriate oversight over the risk 
assessment; and (iii) consideration of which risk mitigation measures 
are appropriate in the circumstances). 


4.9 Sufficient records, for audit trail, should be maintained of the review 
process. 


4.10 The MLRO and senior management (where applicable) should be 
proactively involved in the process of the review. 


? See paragraph 7.33 of the AMLO Guideline 
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Annex Quality and Consistency in Suspicious 
Transaction Reports” 





1. To facilitate the JFIU to extract useful information from STRs and make 
informed decisions in a timely manner, it is important that Als should 
ensure that every STR submitted to the JFIU is accurate and complete with 
narratives which describe the scope and nature of the identified suspicion. 


2. A well-written STR should have a structured format and contain all 
relevant information. The following principles should be followed: 


(a) Structure the content of an STR in a systematic manner (for easy 
comprehension by JFIU); 

(b) Be focused on the main subject of an STR and be concise; 

(c) Ensure reports are made as soon as it is reasonable to do so, 
satisfying the legal obligation; 

(d) Ensure prudent use of file attachments in an STR; 

(e) Avoid providing non-editable transaction records to JFIU; and 

(f) Conduct an appropriate review of a business relationship upon the 
filing of a report to the JFIU. 


3. For avoidance of doubt, Als are not expected to provide evidence of a 
criminal offence; this is the role of the Law Enforcement Agencies 
(“LEAs”). 
Structure the Content of STRs in a Systematic Manner 
4. Ensuring sufficient information is provided in an STR can assist the JFIU to 


understand the background for analysis and investigation. While the 
information required for each STR will vary, it is important to ensure 
sufficient information is provided in all cases. 


5. It is understandable that each Al has its own format and standard in 
compiling STRs. Als are recommended to structure the content of an 
STR systematically for easy comprehension by JFIU, with the following 
topics recommended to be covered, to the extent they have been 
collected: 





1° This document has been prepared by the Hong Kong Monetary Authority, with input from the JFIU, to assist 


Als in the submission of STRs. This document has been revised in May 2018 to incorporate feedback 
provided by JFIU on “Quality of STR” (Feedback No. 191) set out in the STR Quality Analysis Issue 03/17. 
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(i) 


(ii) 


Triggering Factors 

Commission / Types / Association of offence (e.g. fraud, corruption, 
sanctioned, terrorist financing etc.) 

Receipt of search warrant / court order 

Material from publicly available information (e.g. adverse news, SFC 
alerts, etc.) 

Evidence of suspicious transaction patterns (e.g. substantial cash 
deposits, temporary repository of funds, suspected unlicensed 
money service operator, etc.) 


Background of Subject(s) and Summary of the Business Relationship 


For individuals: 


Full name 

Date of birth or age 

Nationality 

Identity document type and number 

Address and telephone number 

Occupation or employment 

Income or other relevant information relating to source of wealth 
and/or funds 

Any other relevant information that relates to net worth 


For corporations: 


Full name and business nature 

Date and place of incorporation 

Registration or incorporation number 

Registered office address and business address 

Details of connected parties (e.g. beneficial owners, directors, 
shareholders, etc.) 

Summary of known financial situation of the entity 


Summary of the business relationship: 


Bank account numbers (and other related accounts where applicable) 
Anticipated level and nature of the activity that is to be undertaken 
through the relationship (e.g. what the typical transactions are likely 
to be) 

The origin / destination of the funds’ 

The purpose and intended nature of the account as provided by the 
customer 

Banking history 





11 


suspicion. 


This refers to the funds involved in the transaction or other activity giving rise to the relevant knowledge or 
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(iii) Transactions 

e Specification of reviewing period 

e Date and type of fund flow 

e Previous transaction pattern (e.g. dormant) 

e Inclusion of total amount of deposit & withdrawal 

° Counterparty information 

e Suspicious indicators and patterns (not simply frequent transactions / 
large-amount transactions)” 


(iv) KYC/CDD & Open Source 

e Result of KYC enquiry and internal investigation? in relation to the 
adverse news from open source 

e Provision of hyperlinks of the relevant open source information 


(v) Conclusion & Way Forward 

e Provision of a summary of the narrative 

e Follow-up action to be taken (e.g. further review, account closure’ 
etc.) 


6. Providing the basic background information of the subject and related 
bank accounts is only the first step. A brief summary should also be 
provided explaining your knowledge or suspicion and the grounds and 
analysis giving rise to the knowledge or suspicion. 


7. It is important to include the reason(s) why the concerned transaction is 
suspicious, i.e. which suspicious activity indicators or red flags are present. 
Suspicion should be supported by information on relevant conduct or 
activities. Reporting purely on certain high-risk businesses, without the 
requisite knowledge or suspicion and supporting details of any unusual 
activities, should be avoided. 


Be Focused on the Main Subject and be Concise 


8. The contents included in an STR should be kept precise and concise 
containing sufficient information to establish suspicion and facilitate 
follow-up enquiries. Als should not overload an STR with too much or 


12 When reporting suspicious activities on the basis that they deviate from normal customer/business 


practices, a simple description of “large transaction incommensurate with customer profile” is insufficient; 
the Al should still elaborate on the suspicion and support this with reference to relevant facts, transactions 
and findings etc. 

The background and process of the KYC enquiry and internal investigation are generally not required to be 
included unless the information is useful in demonstrating the suspicion. 

It is important that the JFIU be aware of any intention to discontinue an account or relationship. Where 
such a course of action is contemplated, Als should include this in the STR. 
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irrelevant information as it will divert focus from the main subject, leading 
to difficulties in understanding and assessment of the information in a 
timely manner. Entities of remote association should be represented in 
separate STRs. 


9. Where enquiries have been made with the customer to clarify or gather 
information, the results (i.e. brief details of those enquiries) may also be 
relevant information for the purposes of the submission. However, 
when making such enquiries with the customer, the Al should also be 
mindful about the risk of tipping off. 


10. In some instances, where applicable, the source of funds of the 
transactions, the source of wealth of the subject persons and connected 
accounts or relationships would be an important source of information for 
providing detailed background about the suspicion. 


11. If the reported subject has been the subject of a previous STR, this will be 
important information for the JFIU and Als should, as far as is reasonably 
practicable, relate the disclosure to the previous one by quoting the 
previous STR reference number(s). Background information of the 
subject and the related bank accounts should still be provided in the STR 
even if those had been provided previously. Similarly, if the reported 
subject has been the subject of a previous and/or on-going investigation 
by any LEA of which they are aware, where such information is available, 
Als should quote the relevant case reference and the details of 
officer-in-charge in the STR, since this information is important to the 
JFIU. 


Timing of Reports 


12: Als should at all times be mindful that when they know or suspect that 
property represents the proceeds of crime or terrorist property, then the 
legal obligation is to make a disclosure to the JFIU as soon as it is 
reasonable to do so. Reference may be made to relevant part of the 
AMLO Guideline. Also, it is undesirable to file STRs for which the 
transaction period covered is obsolete? or the account has already been 
closed without any justification. 





* For example, when an STR is to be filed in response to adverse news, Als should pay attention to whether 


the transaction period being reviewed and reported is relevant to the adverse event. 
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Prudent Use of File Attachments 
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13. 


Narratives should be input in the ‘suspected crime’ and/or ‘suspicious 
indicators’ columns in the STR proforma. From time to time, narratives 
are found to be included as file attachments in the STRs which affects the 
prompt assessment by JFIU officers. Attachments!? should only be used 
to supplement the information provided in the narratives. 


Avoid Providing Non-Editable Transaction Records 


14. 


Transaction records provided should be in editable format, as far as is 
reasonably practicable, to facilitate the JFIU’s further processing and 
analysis. Transaction record generated from reporting entities’ internal 
system should be comprehensible with adequate explanation on the 
abbreviations used. 


Conduct an Appropriate Review of a Business Relationship upon Filing of Reports 


15. 


STR should be filed based on genuine suspicion while Als should conduct 
an appropriate review of a business relationship upon filing of an STR to 
JFIU. Als should not file repetitive STRs to JFIU on the same entities / 
subject(s) based on the same suspicion without taking any mitigating 
measures or providing the justification or rationale for doing so. For 
further guidance and expectations on post-reporting matters, Als should 
refer to paragraphs 4.7 to 4.10 in this Guidance Paper and the relevant 
part of the AMLO Guideline. 
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Where attachments are used, they should be named in a way that reflects the nature of the document in 
order to assist JFIU’s investigation. 
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